This update fixes several problems where the audit system isused on systems with SE Linux disabled, it provides a sampleCAPP configuration, adds new auditd config option to keepall logs instead of rotating them, and does some sanitychecks on some rules before sending them to the kernel.---------------------------------------------------------------------* Wed Aug 10 2005 Steve Grubb <sgrubb@redhat.com> 1.0.2-3.FC4- Set audit_pid to 0 in kernel on auditd shutdown